CSCI E-170 Reading

Lecture 03: Establishing a Secure Environment

required reading:

Documents

• Cryptology and Physical Security: Rights Amplification in Master-Keyed Mechanical Locks Blaze (2002)
• Attack Trees - Schneier (1999)
• The Protection of Information in Computer Systems - Saltzer & Schroeder (1974)
• Remembrance of Data Passed: A Study of Disk Sanitization Practices - Garfinkel et al (2003)
• National Industrial Security Program Operating Manual (DoD 5220.22-M) Chapter 5 Section 7
• State of Mississippi Enterprise Security Policy (skim)
• Human-scale security and the TSA - Blaze (2007)
• Security in 2020 - Schneier (2011)
• How Keys Work - Gozmodo (2013)
• Executive Order -- Improving Critical Infrastructure Cybersecurity - Obama - (2013)

optional reading:

Documents that may be of interest

• Threat Modeling presentation - Sellers
• Dissertation Could Be Security Threat - Washington Post (2003)
• Guide to Lock Picking - Tool (1987, 1991)
• AT&T September 17, 1991 Outage Risks Digest, Vol. 12: issue 43 (1991)
• How to develop an enterprise security policy - Gartenberg - (2005)
• The Lockdown: Locked, but not secure (Part I) - Tobias - (2006)
• Verizon Breach report
• TIA-942 overview
• Risk Management Guide for Information Technology Systems - (2002) NIST
• The Nuclear Energy Option - Cohen - 1990

Books that may be of interest

• Designing Network Security - Kaeo - Cisco Press 2004 - ISBN 1-58705-117-6